Domain health report
Checks registration, DNS, DNSSEC, SSL/TLS, web configuration and email security in one pass. Sections load independently.
What the report checks
-
Registration RDAP
Registry RDAP data: registrar, dates, status codes and an honest availability verdict.
-
DNS & nameservers DoH
Address, mail and text records, nameserver health and CAA.
-
DNSSEC DS · DNSKEY
Whether the domain is signed and validates end to end.
-
SSL/TLS X.509
Certificate validity, hostname coverage, chain trust and protocol.
-
HTTP/HTTPS HTTP
HTTPS availability, redirects and security headers.
-
Email security SPF · DMARC
MX, SPF, DMARC, MTA-STS, TLS-RPT and BIMI.
How the report works
Enter a domain and the report runs six groups of checks in parallel. Registration data comes from the registry’s RDAP service, DNS answers from public DNS-over-HTTPS resolvers, and web and certificate checks connect directly to the site from our servers. Nothing is stored beyond a short cache, and report pages are never published or indexed.
The health score
The score follows published, versioned rules. Every area starts at 100 and loses points only for specific failures or warnings, each of which is listed with its reason. Areas that cannot be checked are excluded rather than guessed. Weights:
Score rules
- Registration 15
- DNS 20
- DNSSEC 10
- SSL/TLS 20
- Web configuration 15
- Email security 20
Scoring rules version 2026.09-1. The score is an indicator of configuration quality, not a security certification.